2a:I[49813,["/_next/static/chunks/3z--bwudlglfp.js","/_next/static/chunks/2u04xn-9yg2co.js","/_next/static/chunks/1b5-8ftwqgmtb.js","/_next/static/chunks/3nqo6bdos11l6.js","/_next/static/chunks/0fz0mlrjifmq7.js","/_next/static/chunks/034_kq3j28m99.js","/_next/static/chunks/29v1ttach42xh.js","/_next/static/chunks/3meo7law-jljp.js","/_next/static/chunks/1hplpmn3-d0tx.js"],"CodeWorkspace"] 2b:T28d2,/** * Copyright (c) 2011-2026 libbitcoin developers * * This file is part of libbitcoin. * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU Affero General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Affero General Public License for more details. * * You should have received a copy of the GNU Affero General Public License * along with this program. If not, see . */ #ifndef LIBBITCOIN_SYSTEM_CRYPTO_NIST_ALGORITHM_HPP #define LIBBITCOIN_SYSTEM_CRYPTO_NIST_ALGORITHM_HPP #include #include #include #include #include #include #include #include #include // Based on: // SEC 1 [Elliptic Curve Cryptography] (2.3, 4.1). // secg.org/sec1-v2.pdf // RFC 6979 [Deterministic Usage of DSA and ECDSA]. // datatracker.ietf.org/doc/html/rfc6979 // [Renes, Costello, Batina] Complete addition formulas for prime order // elliptic curves (algorithms 4 and 6, a = -3). // eprint.iacr.org/2015/1060 namespace libbitcoin { namespace system { namespace nist { /// ECDSA over a short Weierstrass curve with a = -3. Secret key operations /// (key derivation, signing) are constant time. template = true> class algorithm { public: /// Types. /// ----------------------------------------------------------------------- using C = Curve; static constexpr auto size = C::size; using secret_t = data_array; using point_t = data_array; using compressed_t = data_array; using signature_t = data_array; using shared_t = data_array; /// Keys. /// ----------------------------------------------------------------------- /// A secret in [1, n - 1] from maybe_random. static secret_t generate() NOEXCEPT; /// The uncompressed (sec1) public key of secret, false if not in range. static bool public_key(point_t& out, const secret_t& secret) NOEXCEPT; /// False if the uncompressed (sec1) point is not on the curve. static bool is_valid(const point_t& point) NOEXCEPT; /// Convert between uncompressed and compressed (sec1) points. static bool compress(compressed_t& out, const point_t& point) NOEXCEPT; static bool decompress(point_t& out, const compressed_t& point) NOEXCEPT; /// ECDH (sp800-56a). /// ----------------------------------------------------------------------- /// The x coordinate of secret * point, false if the uncompressed (sec1) /// point is not on the curve or the secret is not in range. static bool agree(shared_t& out, const secret_t& secret, const point_t& point) NOEXCEPT; /// ECDSA. /// ----------------------------------------------------------------------- /// Sign the digest as r || s with the rfc6979 nonce. static bool sign(signature_t& out, const secret_t& secret, const_byte_span digest) NOEXCEPT; /// Verify the r || s signature of the digest by the uncompressed point. static bool verify(const signature_t& signature, const point_t& point, const_byte_span digest) NOEXCEPT; /// Encode r || s as a der ECDSA-Sig-Value. static data_chunk encode(const signature_t& signature) NOEXCEPT; /// Decode a strictly der ECDSA-Sig-Value to r || s. static bool decode(signature_t& out, const_byte_span der) NOEXCEPT; protected: /// Types. /// ----------------------------------------------------------------------- /// Little-endian 64 bit limbs. static constexpr auto words = size / sizeof(uint64_t); using limbs_t = std_array; using bytes_t = data_array; /// A modulus with its Montgomery constants (R = 2^(64 * words)). struct modulus_t { limbs_t value{}; limbs_t one{}; limbs_t squared{}; limbs_t inverse_exponent{}; limbs_t root_exponent{}; uint64_t inverse{}; }; /// Homogeneous projective point (x / z, y / z), Montgomery coordinates, /// (0 : 1 : 0) is infinity. struct projective_t { limbs_t x{}; limbs_t y{}; limbs_t z{}; }; /// Multiples 0 through 15 of a point. static constexpr auto window = 4_size; static constexpr auto entries = power2(window); static constexpr auto windows = C::strength / window; using table_t = std_array; /// Limbs. /// ----------------------------------------------------------------------- static constexpr limbs_t to_limbs(const bytes_t& bytes) NOEXCEPT; static constexpr bytes_t to_bytes(const limbs_t& limbs) NOEXCEPT; INLINE static constexpr uint64_t add_carry(uint64_t& out, uint64_t a, uint64_t b, uint64_t carry) NOEXCEPT; INLINE static constexpr uint64_t subtract_borrow(uint64_t& out, uint64_t a, uint64_t b, uint64_t borrow) NOEXCEPT; INLINE static constexpr uint64_t multiply_add(uint64_t t, uint64_t a, uint64_t b, uint64_t& carry) NOEXCEPT; INLINE static constexpr void select(limbs_t& out, uint64_t mask, const limbs_t& a, const limbs_t& b) NOEXCEPT; INLINE static constexpr uint64_t zero_mask(const limbs_t& a) NOEXCEPT; static constexpr bool is_zero(const limbs_t& a) NOEXCEPT; static constexpr bool is_less(const limbs_t& a, const limbs_t& b) NOEXCEPT; static constexpr uint64_t sum(limbs_t& out, const limbs_t& a, const limbs_t& b) NOEXCEPT; static constexpr uint64_t difference(limbs_t& out, const limbs_t& a, const limbs_t& b) NOEXCEPT; /// Modular arithmetic (operands less than the modulus). /// ----------------------------------------------------------------------- static consteval modulus_t make_modulus(const limbs_t& value) NOEXCEPT; static constexpr const modulus_t& field() NOEXCEPT; static constexpr const modulus_t& scalar() NOEXCEPT; static constexpr limbs_t add(const limbs_t& a, const limbs_t& b, const modulus_t& m) NOEXCEPT; static constexpr limbs_t subtract(const limbs_t& a, const limbs_t& b, const modulus_t& m) NOEXCEPT; static constexpr limbs_t multiply(const limbs_t& a, const limbs_t& b, const modulus_t& m) NOEXCEPT; static constexpr limbs_t power(const limbs_t& a, const limbs_t& exponent, const modulus_t& m) NOEXCEPT; static constexpr limbs_t inverse(const limbs_t& a, const modulus_t& m) NOEXCEPT; static constexpr limbs_t to_montgomery(const limbs_t& a, const modulus_t& m) NOEXCEPT; static constexpr limbs_t from_montgomery(const limbs_t& a, const modulus_t& m) NOEXCEPT; /// Constants. /// ----------------------------------------------------------------------- static constexpr modulus_t field_modulus = make_modulus(to_limbs(C::prime)); static constexpr modulus_t scalar_modulus = make_modulus(to_limbs(C::order)); static constexpr limbs_t curve_b = to_montgomery(to_limbs(C::b), field_modulus); /// Points. /// ----------------------------------------------------------------------- static constexpr projective_t infinity() NOEXCEPT; static constexpr projective_t generator() NOEXCEPT; static constexpr limbs_t curve(const limbs_t& x) NOEXCEPT; static constexpr projective_t add(const projective_t& p, const projective_t& q) NOEXCEPT; static constexpr projective_t twice(const projective_t& p) NOEXCEPT; static constexpr bool to_affine(limbs_t& x, limbs_t& y, const projective_t& p) NOEXCEPT; static constexpr bool parse(projective_t& out, const point_t& point) NOEXCEPT; static constexpr point_t serialize(const limbs_t& x, const limbs_t& y) NOEXCEPT; /// Multiplication. /// ----------------------------------------------------------------------- static constexpr table_t make_table(const projective_t& p) NOEXCEPT; static constexpr table_t generator_table() NOEXCEPT; static constexpr size_t digit(const limbs_t& scalar, size_t index) NOEXCEPT; static constexpr projective_t lookup(const table_t& table, size_t digit) NOEXCEPT; static constexpr projective_t multiply(const table_t& table, const limbs_t& scalar) NOEXCEPT; static constexpr projective_t multiply(const limbs_t& g, const table_t& generators, const limbs_t& q, const table_t& table) NOEXCEPT; /// ECDSA. /// ----------------------------------------------------------------------- static constexpr limbs_t to_scalar(const_byte_span digest) NOEXCEPT; static constexpr bool is_scalar(const limbs_t& value) NOEXCEPT; static constexpr limbs_t reduce(const limbs_t& value) NOEXCEPT; /// DER. /// ----------------------------------------------------------------------- static void encode_integer(data_chunk& out, const_byte_span value) NOEXCEPT; static bool decode_integer(bytes_t& out, const_byte_span& der) NOEXCEPT; }; } // namespace nist } // namespace system } // namespace libbitcoin #define TEMPLATE template If> #define CLASS algorithm BC_PUSH_WARNING(NO_ARRAY_INDEXING) BC_PUSH_WARNING(NO_DYNAMIC_ARRAY_INDEXING) BC_PUSH_WARNING(NO_USE_OF_SPAN) #include #include #include #include #include #include #include BC_POP_WARNING() BC_POP_WARNING() BC_POP_WARNING() #undef CLASS #undef TEMPLATE #endif 13:["$","$L2a",null,{"project":{"id":"cmuidb72x000001s1932ifphv","owner":"libbitcoin","repo":"libbitcoin-system","displayName":"libbitcoin/libbitcoin-system","defaultBranch":"master"},"commit":{"sha":"121d29eceaf821490dfef9f329758891c584ae57","message":"Disable clang-cl warnings in system headers.","authorLogin":"evoskuil","authorName":"Eric Voskuil","date":"2026-10-30T18:12:39.000Z","htmlUrl":"https://github.com/libbitcoin/libbitcoin-system/commit/121d29eceaf821490dfef9f329758891c584ae57","isHead":false,"headSha":"5e1386d3959012e423ad11fa89e9faaae66ade16"},"gitRef":"121d29eceaf821490dfef9f329758891c584ae57","path":"include/bitcoin/system/crypto/nist/algorithm.hpp","target":{"kind":"file","file":{"path":"include/bitcoin/system/crypto/nist/algorithm.hpp","size":10450,"content":"$2b","tooLarge":false,"binary":false,"htmlUrl":"https://github.com/libbitcoin/libbitcoin-system/blob/121d29eceaf821490dfef9f329758891c584ae57/include/bitcoin/system/crypto/nist/algorithm.hpp","mutants":[],"mutantsAtOtherRevisions":0}},"treeCache":{"":[{"name":".github","path":".github","type":"dir","size":null},{"name":".vscode","path":".vscode","type":"dir","size":null},{"name":"builds","path":"builds","type":"dir","size":null},{"name":"doc","path":"doc","type":"dir","size":null},{"name":"include","path":"include","type":"dir","size":null},{"name":"src","path":"src","type":"dir","size":null},{"name":"test","path":"test","type":"dir","size":null},{"name":"tools","path":"tools","type":"dir","size":null},{"name":".gitignore","path":".gitignore","type":"file","size":1037},{"name":"COPYING","path":"COPYING","type":"file","size":33899},{"name":"README.md","path":"README.md","type":"file","size":9650}],"include":[{"name":"bitcoin","path":"include/bitcoin","type":"dir","size":null}],"include/bitcoin":[{"name":"system","path":"include/bitcoin/system","type":"dir","size":null},{"name":"system.hpp","path":"include/bitcoin/system.hpp","type":"file","size":18489}],"include/bitcoin/system":[{"name":"chain","path":"include/bitcoin/system/chain","type":"dir","size":null},{"name":"config","path":"include/bitcoin/system/config","type":"dir","size":null},{"name":"crypto","path":"include/bitcoin/system/crypto","type":"dir","size":null},{"name":"data","path":"include/bitcoin/system/data","type":"dir","size":null},{"name":"endian","path":"include/bitcoin/system/endian","type":"dir","size":null},{"name":"error","path":"include/bitcoin/system/error","type":"dir","size":null},{"name":"filter","path":"include/bitcoin/system/filter","type":"dir","size":null},{"name":"hash","path":"include/bitcoin/system/hash","type":"dir","size":null},{"name":"impl","path":"include/bitcoin/system/impl","type":"dir","size":null},{"name":"intrinsics","path":"include/bitcoin/system/intrinsics","type":"dir","size":null},{"name":"machine","path":"include/bitcoin/system/machine","type":"dir","size":null},{"name":"math","path":"include/bitcoin/system/math","type":"dir","size":null},{"name":"radix","path":"include/bitcoin/system/radix","type":"dir","size":null},{"name":"serial","path":"include/bitcoin/system/serial","type":"dir","size":null},{"name":"stream","path":"include/bitcoin/system/stream","type":"dir","size":null},{"name":"unicode","path":"include/bitcoin/system/unicode","type":"dir","size":null},{"name":"wallet","path":"include/bitcoin/system/wallet","type":"dir","size":null},{"name":"words","path":"include/bitcoin/system/words","type":"dir","size":null},{"name":"x509","path":"include/bitcoin/system/x509","type":"dir","size":null},{"name":"allocator.hpp","path":"include/bitcoin/system/allocator.hpp","type":"file","size":9990},{"name":"arena.hpp","path":"include/bitcoin/system/arena.hpp","type":"file","size":4397},{"name":"boost.hpp","path":"include/bitcoin/system/boost.hpp","type":"file","size":2549},{"name":"constants.hpp","path":"include/bitcoin/system/constants.hpp","type":"file","size":7217},{"name":"constraints.hpp","path":"include/bitcoin/system/constraints.hpp","type":"file","size":8213},{"name":"define.hpp","path":"include/bitcoin/system/define.hpp","type":"file","size":1861},{"name":"exceptions.hpp","path":"include/bitcoin/system/exceptions.hpp","type":"file","size":2544},{"name":"execution.hpp","path":"include/bitcoin/system/execution.hpp","type":"file","size":10757},{"name":"forks.hpp","path":"include/bitcoin/system/forks.hpp","type":"file","size":2593},{"name":"funclets.hpp","path":"include/bitcoin/system/funclets.hpp","type":"file","size":5883},{"name":"have.hpp","path":"include/bitcoin/system/have.hpp","type":"file","size":13094},{"name":"literals.hpp","path":"include/bitcoin/system/literals.hpp","type":"file","size":6680},{"name":"preprocessor.hpp","path":"include/bitcoin/system/preprocessor.hpp","type":"file","size":7292},{"name":"settings.hpp","path":"include/bitcoin/system/settings.hpp","type":"file","size":4769},{"name":"typelets.hpp","path":"include/bitcoin/system/typelets.hpp","type":"file","size":7846},{"name":"types.hpp","path":"include/bitcoin/system/types.hpp","type":"file","size":12018},{"name":"version.hpp.in","path":"include/bitcoin/system/version.hpp.in","type":"file","size":1041},{"name":"warnings.hpp","path":"include/bitcoin/system/warnings.hpp","type":"file","size":4555}],"include/bitcoin/system/crypto":[{"name":"aes","path":"include/bitcoin/system/crypto/aes","type":"dir","size":null},{"name":"nist","path":"include/bitcoin/system/crypto/nist","type":"dir","size":null},{"name":"secp256k1","path":"include/bitcoin/system/crypto/secp256k1","type":"dir","size":null},{"name":"shamir","path":"include/bitcoin/system/crypto/shamir","type":"dir","size":null},{"name":"aes_gcm.hpp","path":"include/bitcoin/system/crypto/aes_gcm.hpp","type":"file","size":3230},{"name":"algorithms.hpp","path":"include/bitcoin/system/crypto/algorithms.hpp","type":"file","size":1617},{"name":"chacha20_poly1305.hpp","path":"include/bitcoin/system/crypto/chacha20_poly1305.hpp","type":"file","size":2782},{"name":"chacha20.hpp","path":"include/bitcoin/system/crypto/chacha20.hpp","type":"file","size":5172},{"name":"crypto.hpp","path":"include/bitcoin/system/crypto/crypto.hpp","type":"file","size":2065},{"name":"der_parser.hpp","path":"include/bitcoin/system/crypto/der_parser.hpp","type":"file","size":1657},{"name":"fschacha20_poly1305.hpp","path":"include/bitcoin/system/crypto/fschacha20_poly1305.hpp","type":"file","size":2480},{"name":"fschacha20.hpp","path":"include/bitcoin/system/crypto/fschacha20.hpp","type":"file","size":1627},{"name":"maybe_random.hpp","path":"include/bitcoin/system/crypto/maybe_random.hpp","type":"file","size":2424},{"name":"poly1305.hpp","path":"include/bitcoin/system/crypto/poly1305.hpp","type":"file","size":4102},{"name":"salsa20.hpp","path":"include/bitcoin/system/crypto/salsa20.hpp","type":"file","size":3434},{"name":"secp256k1.hpp","path":"include/bitcoin/system/crypto/secp256k1.hpp","type":"file","size":11974},{"name":"x25519.hpp","path":"include/bitcoin/system/crypto/x25519.hpp","type":"file","size":2590},{"name":"xsalsa20_poly1305.hpp","path":"include/bitcoin/system/crypto/xsalsa20_poly1305.hpp","type":"file","size":2076}],"include/bitcoin/system/crypto/nist":[{"name":"algorithm.hpp","path":"include/bitcoin/system/crypto/nist/algorithm.hpp","type":"file","size":10450},{"name":"nist.hpp","path":"include/bitcoin/system/crypto/nist/nist.hpp","type":"file","size":3278}]},"revisions":[{"commitSha":"c37c9b73278f1f97e6eb6421f3544f5e58edba2f","branch":null,"commitMessage":"Merge pull request #2132 from evoskuil/master","commitDate":"2026-10-29T20:40:10.000Z","mutantCount":36},{"commitSha":"9fa0f9a07f31c5cc9ebe5efa05e6d4a6d12ba183","branch":null,"commitMessage":"Test script pattern length guards and the sixteen key multisig builder boundary.","commitDate":"2026-09-29T18:05:00.000Z","mutantCount":129},{"commitSha":"98db5bfd7c7b65532e42309c7b71419d82ec5ea8","branch":null,"commitMessage":"Merge pull request #2017 from evoskuil/master","commitDate":"2026-09-28T17:24:16.000Z","mutantCount":230},{"commitSha":"827fb29d0fecbdf7a157e05b1bea59bc916787aa","branch":null,"commitMessage":"Test multisig sighash cache reset across distinct subscripts","commitDate":"2026-09-26T12:24:47.000Z","mutantCount":1},{"commitSha":"8e7a9fdcb4ca72bc5bfe9961815aaa9bc33b64a0","branch":null,"commitMessage":"Remove dead include.","commitDate":"2026-09-25T06:52:28.000Z","mutantCount":90}],"signedIn":false,"pullRequest":{"id":"cmvwrgy0h00ex01n1ycl8rckj","number":2134,"title":"Expanded CI coverage. (clang-cl, Arm, mac x64).","headSha":"121d29eceaf821490dfef9f329758891c584ae57","state":"MERGED","htmlUrl":"https://github.com/libbitcoin/libbitcoin-system/pull/2134","ranges":[],"fileInDiff":false,"atHead":true}}]